Hacker Newsnew | past | comments | ask | show | jobs | submit | narcissus's commentslogin

You don't need to root your phone to run Blokada, if that's what you're asking... I installed it sometime last year and as of right now, it claims to have blocked 595944 requests.


"This is why the buffer is smaller in bitcoin than in these scamcoins."

Are you saying that the buffer is smaller in Bitcoin because of that CVE issue? As in, the issue was discovered and the solution was the make the buffer smaller, instead of resolving the issue correctly?

Because reading that article seems to imply, at least, that core is affected that issue or am I reading that wrong? Or do you mean something like "lucky the buffer is smaller in core"? Saying that 'something is why something else' reads like that something else is what caused the something, and like I say, I find it hard to believe that the solution to that CVE was "forget fixing the actual problem, we'll just make the buffer smaller"...


The buffers in Bitcoin were specifically sized in response to known vulnerabilities long ago, some of which have been reintroduced by clones.

Appropriately sizing buffers is the correct fix in some cases... For example, when the vulnerability is that an attacker can make N connections and begin N max_size messages, causing the allocation of N*max_size ram a perfectly reasonable fix is making sure that the protocol guarantees that the maximum size of any single message is small enough that decoding N in parallel isn't an issue.


That's fair... I was completely misunderstanding the problem.

So is it that core is not affected by that last CVE at all, or just not as much as the others?


> So is it that core is not affected by that last CVE at all

Not at all.

"re: deserialization memory allocation: as should be obvious from the code snippet in the report, the Unersialize_impl function for vector types does not allocate more than 5MB at a time, instead ensuring the input stream has the neccessary amount of data to fill the allocation first. Thus, this function will never allocate (materially) more than the input stream, which in this case is limited by the maximum message size. In the case of Bitcoin Core this is limited to around 4MB, though again, I understand Bitcoin SV has significantly increased this limit. Thanks again for the report!"


Nice. I know this is a thing that I should be able to just read myself, but it's way too early (or is it late?) here, so I appreciate the information! Thanks.


I've not played it, but Obduction supports VR kits and is by Cyan Worlds themselves (so I can only assume it's as Myst like as you're going to get).


I know but unfortunately not for Oculus Go. Not gonna buy a PC and Rift just to play it.


OK I must be missing something here: how can any of the large pools have 51% of the mining power?

How can you have more than one pool, each with more than half the power?

EDIT: OK I see where you're coming from I think... you mean any of the pools could 51% the forked branch, right?


Yes 51% of the branch you are attacking. They have hard forked, any bitcoin mining pool could easily control 51% (like 80%) of the bitcash mining worldwide.


I assume it means any of the larger pools in Bitcoin could switch over to one of the smaller altcoins and overwhelm the much smaller pool of miners there.


The thing that I hate about this argument of 'consensus has been wrong before' when it comes to climate change is that essentially, the argument seems to be 'everyone always said we were pumping too much CO2 into the air and that would cause global warming and now there's people saying that consensus is wrong'.

Unless I'm seriously wrong with my scientific history (and it's extremely possible!) I didn't think this was the case. Decades ago there were people talking about it but the consensus was that it was crackpottery.

However now that consensus has decided "yeah, we were wrong" people point at that consensus and say "hey, consensus has been wrong before!". I look at that and just think... yeah, we know. It was wrong and we've spent a heap of time finding that out.

I mean, it's not the case that 100% of people knew it as a 'scientific fact' that CO2 lead to climate change and now we're starting to question that consensus. The questioning has already happened.

Or I completely wrong in this?


But I think that's true of everything, no?

Before people thoughts ulcers were caused by stress they probably thought it was due to too much "humor" and required treatment by bloodletting.

The point is that we advance scientific thinking by challenging ideas. If right now most scientists thinking global warming is real, then fine. Just don't try and shutdown the ones that don't agree.


No one is trying to shut down scientists that don't agree; they're trying to shut down the ignorant public who's non agreement is baseless because they're getting in the way of setting public policy based on the best information science has to offer us at the moment.


That is a problem that will never go away. You will always have someone spreading incorrect information and "getting in the way" (vaccines cause autism, etc).

If the global warming data is as rock-solid as they, I wouldn't worry to much about it.


Yeah, that's a good point and I see where you're coming from. But generally when I hear the argument about consensus, it seems to end with nothing other than an implication of "and therefore they're obviously wrong, simply because of the current consensus".

But yeah, I see your point.


The entire "Politics in the Animal Kingdom" series is great, I think... http://www.cgpgrey.com/politics-in-the-animal-kingdom/


Possibly interesting to someone: Costco in Canada no longer has that Amex relationship. Instead, they are associated with Capital One and their Mastercard. There's a page on the costco.ca site with a heading of "Credit Cards Accepted at the Warehouse" that says:

The following cards are accepted in our Canadian warehouse locations and at our gas stations:

MasterCard Debit cards Costco Cash Cards

I didn't even think to try last time I was at Costco, but this does seem to imply we can use our normal Mastercard credit card there now?


They will try and sell you theirs, but you can use any MasterCard.


I think the difference is that the date search is for finding stuff that was originally posted / crawled in that date range. (I believe) the original comment was regarding searching some HTML, for example, as it was at that date.

That is to say: if you had a page that changed over time, you would be able to search for that page as it existed in a particular date range, not just searching for a page that was posted / first crawled in that range.


So FWIW, the thing about the state of Kentucky isn't true. It's listed in 'The Repository of Lost Legends' on Snopes, which is their section of made up stuff.

I'm only mentioning this as I didn't realise for a very long time that the T.R.O.L.L. (now it should make sense) was all made up and I had a tendency to quote that section a lot.

I hope you haven't spent as many years believing that section as I did :)


I hope that is going to be acceptable: my laptop is way too old for my battery to hold a charge, and I really only use it when I'm on the road. I'd hate to have to buy a new one simply to get it on the plane :(


If your laptop's too old to hold a charge, is there really a reason to bring it on the plane with you? Just check it in and hope they don't wreck it.


> ...is there really a reason to bring it on the plane with you? Just check it in and hope they don't wreck it.

That's exactly the reason why I bring stuff in with me. If they're valuable or fragile, I would never check it in.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: